Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f6c0f58-873c-30ca-b0c9-86f55b773d4f.roa
File:                     1f6c0f58-873c-30ca-b0c9-86f55b773d4f.roa (raw, json)
Hash identifier:          eEEUzo3TtKKnUWieqNHEI3aSDpAM1pQgvejriCGOgeg=
Subject key identifier:   E2:57:C7:BF:24:BC:C8:66:DD:DA:B2:9B:F8:4B:9D:99:E2:32:D0:3B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CC8DC99C0AB67C60E52A24800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f6c0f58-873c-30ca-b0c9-86f55b773d4f.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     400402
IP address blocks:        23.27.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:99:c0:ab:67:c6:0e:52:a2:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=dd95e237-9a51-4806-8053-2149ec57e7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:12:fd:4d:b3:d0:bc:e6:82:f0:f6:ac:37:
                    1f:e9:58:73:82:5c:a1:96:78:59:1d:24:82:38:9a:
                    79:dc:26:f5:3a:38:db:81:46:48:3c:63:84:1a:ac:
                    21:a2:f8:21:82:52:8c:fd:6b:38:d7:cf:1f:c5:36:
                    d7:93:14:3f:7b:66:82:da:0c:96:ff:91:25:43:19:
                    bc:ba:d7:51:f9:02:7d:04:03:ee:e4:32:40:5d:d5:
                    ff:26:30:e4:89:0b:3d:4f:fd:fc:c1:b3:57:1f:52:
                    d3:ca:87:13:dd:40:fa:a5:be:23:a6:63:79:6b:91:
                    51:04:09:1a:cd:03:de:05:f1:76:48:f8:20:75:42:
                    cf:6d:71:e4:2e:51:4e:a5:f2:a5:92:e4:71:eb:01:
                    f7:6d:15:16:83:3f:b0:76:f3:54:87:39:84:c6:8b:
                    6b:8d:a3:23:1c:a5:ba:46:8b:4b:9e:00:65:05:9d:
                    4e:2b:41:2e:1b:d3:d7:9d:a2:9d:07:be:fc:51:0c:
                    eb:73:a3:9a:23:2e:c5:92:79:a7:12:8c:ca:25:13:
                    b8:60:e9:8c:cf:cb:db:1d:6f:b5:13:4a:ee:5b:4d:
                    49:73:be:02:2d:1d:de:4b:6c:22:47:dc:6e:ef:79:
                    83:77:37:bb:a3:69:6f:fa:67:55:85:60:b7:63:a1:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:57:C7:BF:24:BC:C8:66:DD:DA:B2:9B:F8:4B:9D:99:E2:32:D0:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f6c0f58-873c-30ca-b0c9-86f55b773d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:af:88:a6:fe:e7:0e:52:25:f1:ad:82:89:9a:03:c9:0b:84:
         99:a7:49:7b:a7:6c:7b:d3:73:2a:3a:10:de:dc:f4:d0:fe:1c:
         24:3b:5a:89:e3:29:19:c6:0d:4f:75:e7:c5:3d:9c:70:1c:6f:
         0f:fd:74:63:89:70:9f:47:4a:ae:0b:06:6d:44:53:ab:96:3b:
         b4:c1:70:5e:57:a4:99:42:00:21:8f:0d:04:07:27:73:a0:25:
         e3:a9:28:1b:b8:d3:f2:73:44:75:ac:9d:9a:03:03:03:72:4f:
         01:25:8b:c0:80:60:07:57:3f:9c:49:df:fc:4a:08:90:04:c3:
         47:30:7c:1c:fc:08:9e:a5:a7:55:d9:c1:b3:a5:4e:1c:bf:39:
         f0:49:b4:b7:38:eb:62:4f:90:75:c4:c3:49:42:f1:1c:74:69:
         0e:29:88:44:91:a5:49:ff:9d:24:ee:0b:05:9a:39:ab:06:52:
         db:eb:64:8c:2e:a8:f7:dd:cb:75:51:56:0c:e5:a9:1d:17:96:
         f3:66:57:64:af:c3:8a:b6:33:6a:84:40:6f:0a:3e:96:5c:56:
         fb:7a:18:57:2d:ab:fb:37:2e:e3:00:d0:c9:4a:09:bf:69:1f:
         ca:a5:d5:b0:22:b8:33:af:10:dc:8f:3d:f7:5f:2a:b5:86:e4:
         46:cb:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:30:40 2026 by rpki-client